After years of anticipation, the final version of ICH E6(R3) Annex 2 was adopted on June 3, 2026. If you’ve been following the evolution of Good Clinical Practice guidance, you know that the core E6(R3) guideline, finalized in January 2025, was always intended to be read alongside annexes that would address specific trial methodologies in greater depth. Annex 2 is that companion piece for decentralized, pragmatic, and real-world data-driven trials, and its arrival has real, practical implications for how sponsors and sites plan, conduct, and oversee clinical research.
In this post, we break down what Annex 2 says, why it matters, and what actionable steps both sponsors and sites should be taking right now.
What Is ICH E6(R3) Annex 2, and Why Does It Exist?
Annex 2 was developed in recognition of a straightforward reality: clinical trial designs have changed dramatically, and the existing GCP framework needed to address the dramatic changes directly. Trials today routinely incorporate remote visits, digital health technologies (DHTs), data collected at participants’ homes, real-world data (RWD) drawn from electronic health records and registries, and investigational product shipped directly to patients. The core E6(R3) principles provide the overarching framework, but Annex 2 gets into the specifics of how GCP applies when these methodologies are in play.
The guidance covers three broad categories of trial methodology: decentralized elements (trial activities conducted outside the investigator’s location), pragmatic elements (those that integrate aspects of usual clinical practice into trial design and conduct), and the use of real-world data. As the guidance itself acknowledges, these methodologies are not mutually exclusive (a single trial may incorporate all three) and Annex 2 is designed to address them in combination.
It is also worth noting what Annex 2 is not. It is not an endorsement of any particular methodology, nor is it meant to be exhaustive. The ICH Expert Working Group was deliberate in leaving room for continued evolution, noting that considerations included in the Annex may be applied to emerging methodologies as the clinical trial ecosystem continues to develop.
Key Themes Running Through the Guidance
Before diving into sponsor and site-specific takeaways, three overarching themes are worth calling out because they shape the entire document.
- Proportionality and risk-based thinking. The concept of a proportionate, risk-based approach is woven throughout Annex 2. The level of oversight required from investigators and/or sponsors should reflect the criticality of the data being collected and the risk to participant rights, safety, and well-being. This is not a license to reduce oversight across the board; it is a framework for applying oversight intelligently and efficiently.
- Quality by Design (QbD). Annex 2 reinforces the QbD principle introduced in the core E6(R3) guideline. Methodologies should be fit for purpose, and the quality and volume of data generated should be sufficient to support sound decision-making. This is particularly important when RWD is involved, since that data was not originally collected with the trial’s objectives in mind.
- Early engagement. Whether with regulatory authorities, patients, patient advocacy groups, or healthcare professionals, Annex 2 repeatedly emphasizes the value of early engagement. The complexity of modern trial designs makes it far easier to identify and resolve issues before a trial starts than to manage problems mid-study.
What Should Sponsors Know about ICH E6(R3) Annex 2?
1. Early Stakeholder Engagement Is No Longer Optional
Annex 2 dedicates meaningful attention to pre-trial engagement with three groups: patients and patient advocacy organizations, healthcare professionals and investigators, and regulatory authorities. The guidance encourages sponsors to involve patients early in DHT selection and trial design to ensure usability, identify potential barriers related to digital literacy or technology access, and refine logistics. Similarly, early engagement with investigators is described as critical. Not just for practical infrastructure planning, but for ensuring that protocols reflect the realities of usual clinical practice when pragmatic elements are incorporated.
For sponsors planning trials with regulatory complexity (e.g. novel designs, RWD-dependent endpoints, or new DHT applications) the guidance explicitly encourages early dialogue with regulatory authorities. Getting alignment on methodology before the protocol is locked can prevent costly late-stage surprises.
2. RWD Governance Requires Serious Infrastructure
The sections of Annex 2 addressing real-world data are among the most detailed and demanding in the entire document, and for good reason. When sponsors elect to use RWD from EHRs, claims databases, or registries, they remain ultimately responsible for ensuring that data is fit for purpose, properly governed, and compliant with applicable privacy requirements. That responsibility does not transfer to the institution or registry that holds the data.
In practical terms, this means sponsors must establish formal documented agreements with any entity that controls RWD used in their trials. These agreements must address data sharing, data protection, access for quality assurance activities, and regulatory inspection access. For high-criticality RWD use cases, such as when RWD supports key efficacy or safety endpoints, simply assessing the fitness for purpose of the data source at a systems and process level is explicitly described as insufficient. Sponsors may need to access source records to confirm that clinical events were assessed and documented as expected.
Annex 2 also calls out specific RWD quality considerations that sponsors must address: variability in data formats and terminology across sources, inconsistent timing of data collection in clinical practice settings, potential for missing data due to participants moving between healthcare systems, and the challenge of capturing intercurrent events that may not appear in an EHR.
3. Protocol Development Must Account for Multi-Source Complexity
Annex 2 requires that data variability is addressed in situations where data originates from multiple sources or practice settings. These considerations must be addressed in the trial design and discussed in the protocol or related documents, including the statistical analysis plan. This is not an afterthought; it is a design consideration that needs to be built in from the beginning.
Protocols must also clearly describe how safety information will be collected across sources, how signals suggesting a potential safety concern will be identified and surfaced to the investigator in a timely manner, and what actions the investigator should take. For trials using DHTs to collect data, the guidance specifically notes that information should be provided to the investigator in a way that is relevant, meaningful, and manageable. A data dump that overwhelms rather than informs is not useful in this case.
4. Investigational Product Logistics Demand Proactive Risk Assessment
The option to ship investigational product directly to trial participants (whether arranged by the investigator or the sponsor) is addressed in detail. Annex 2 makes clear that this convenience comes with significant process requirements. Before committing to direct-to-participant shipping, sponsors must assess the stability of the product, its storage requirements, the complexity of preparation and administration, the level of clinical observation required post-administration, blinding considerations, and the need for emergency plans.
When sponsors arrange direct shipment, they must ensure the process is initiated only after investigator authorization, and they must have systems in place to confirm delivery and appropriate administration. The investigator, regardless of who arranges the shipment, retains responsibility for the safe and appropriate use of the product by participants under their care.
5. Privacy and Cybersecurity Are Compliance Requirements, Not IT Issues
Annex 2 addresses data privacy and cybersecurity as sponsor obligations rather than technical considerations to be delegated to IT departments. When personal information must be disclosed to service providers for activities such as home nursing or investigational product shipment, sponsors are responsible for ensuring appropriate consent is in place and that access is limited to authorized parties. The risk of data breaches from DHT-collected or RWD-sourced data is explicitly called out as something sponsors must actively address.
What Should Sites Know about ICH E6(R3) Annex 2?
1. Investigator Oversight Remains the Cornerstone, Even at a Distance
One of the clearest messages in Annex 2 is that decentralization of trial activities does not decentralize investigator accountability. The investigator remains responsible for the conduct of the trial regardless of where activities take place, and must maintain appropriate oversight of all delegated trial-related activities. Annex 2 acknowledges that this oversight can take different forms: direct supervision, remote communication, or review of essential records. The appropriate level of oversight is context-dependent. But context-dependent does not mean minimal.
For sites working with local healthcare professionals (HCPs) who perform routine trial-related activities as part of usual clinical practice, Annex 2 requires that appropriate arrangements be in place to ensure relevant information and records from those activities are made available to the investigator. This includes defining how data are shared, how records are retained (including certified copies), how data privacy is maintained, and what mechanisms exist to ensure data integrity.
2. Informed Consent Processes Must Reflect the Trial’s Actual Methodology
The informed consent requirements in Annex 2 are notably more detailed than in previous GCP guidance, reflecting the practical complexity of modern trials. When remote consent is used, investigators must verify participant identity (for example, via verification of an official identification document during a video call) and the verification method must be pre-specified. When computerized consent systems are used, participants must generally be given the option of a paper-based or in-person alternative if they prefer it.
Perhaps most importantly, the informed consent materials must describe what participant-related data will be collected, how it may be used, and who will have access to personal information such as health records and home addresses. Given that decentralized trial activities often involve a wider range of parties having access to participant data than a traditional site-based trial, this is an area where sites and sponsors need to collaborate carefully during protocol development.
3. Safety Monitoring Across Multiple Data Sources Requires Clear Processes
For sites participating in trials with decentralized or pragmatic elements, safety information may arrive from multiple directions such as DHT alerts, remote visit reports, home nurse observations, EHR data, and in-person visits. Annex 2 requires that investigators have processes in place to receive, review, and act on safety information from all these sources in a timely manner. Sponsors are responsible for ensuring this information is delivered to investigators in a meaningful and actionable format, but sites are responsible for having the workflows in place to process it.
This is a practical area where sites should be asking questions early in the study start-up process: How will safety signals from DHTs be surfaced? What is the expected turnaround for investigator review? What escalation procedures are in place if a participant experiencing an adverse event cannot be reached in person?
4. Technology Readiness Is Now a Site Qualification Consideration
Annex 2 makes clear that sponsors must assess the training and technical support needs of investigator sites when planning trials with novel methodologies, and that this assessment should inform both protocol development and site selection. From a site perspective, this means that the ability to support DHT-based data collection, remote visit platforms, electronic consent tools, and potentially direct-to-participant investigational product management are increasingly relevant to a site’s competitiveness for study participation.
Sites that have invested in purpose-built, validated electronic systems and that can demonstrate their staff is trained and their processes are documented are better positioned for inspection readiness and for attracting sponsors who need to demonstrate GCP compliance in complex trial designs.
The Bigger Picture
Annex 2 does not introduce fundamentally new principles. What it does is apply established GCP principles such as participant protection, data integrity, investigator accountability, and sponsor oversight to the realities of how trials are actually being conducted today. Decentralized elements, pragmatic designs, and real-world data are no longer emerging concepts being piloted at the margins of clinical research. They are increasingly central to how sponsors design studies, and Annex 2 formalizes the GCP expectations that come with them.
For organizations that have already been building their operational and compliance infrastructure around these methodologies, Annex 2 largely validates the direction they’ve been heading. For those still working to catch up, the guidance provides a clear framework for what needs to be in place.
The bottom line for both sponsors and sites: read Annex 2 in conjunction with the core E6(R3) guideline and Annex 1, assess your current processes against the expectations it articulates, and prioritize early engagement with regulators, with your technology vendors, and with each other.
Explore how CRIO can help your organization navigate the evolving GCP landscape and ensure compliance with ICH E6(R3) and Annex 2. Visit clinicalresearch.io/security-compliance or contact us to learn more.